2016.04.20 14:40

[Adware] Savepathdeals

조회 수 242 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 댓글로 가기 인쇄

# [Adware] Savepathdeals

 

* C:\Users\{Username}\AppData\Roaming\Mozilla\Firefox\extensions\

savepathdeals@savepathdeals.com\chrome.manifest
savepathdeals@savepathdeals.com\content\activity.js
savepathdeals@savepathdeals.com\content\couponsapp.js
savepathdeals@savepathdeals.com\content\couponsapp.xul
savepathdeals@savepathdeals.com\content\intextSB.js
savepathdeals@savepathdeals.com\install.rdf
savepathdeals@savepathdeals.com\local\jquery-1.7.1.min.js
savepathdeals@savepathdeals.com\savepathdeals@savepathdeals.com.xpi

 

* C:\Program Files\Savepath Deals

GUID.ini

SavepathDeals.dll
SavepathDeals.pem
SavepathDeals.safariextz
uicon.ico
uninst000.exe
SavepathDeals\activity.js
SavepathDeals\background.html
SavepathDeals\background.js
SavepathDeals\background_intext.js
SavepathDeals\content.js
SavepathDeals\content_intext.js
SavepathDeals\jquery-1.7.1.min.js
SavepathDeals\manifest.json
SavepathDeals\savepathdeals.js

savepathdeals@savepathdeals.com\chrome.manifest
savepathdeals@savepathdeals.com\content\activity.js
savepathdeals@savepathdeals.com\content\couponsapp.js
savepathdeals@savepathdeals.com\content\couponsapp.xul
savepathdeals@savepathdeals.com\content\intextSB.js
savepathdeals@savepathdeals.com\install.rdf
savepathdeals@savepathdeals.com\local\jquery-1.7.1.min.js
savepathdeals@savepathdeals.com\savepathdeals@savepathdeals.com.xpi
 

 

* Delete keys
HKLM\SOFTWARE\Classes\CLSID\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF}
HKLM\SOFTWARE\Classes\Interface\{95E0F85F-EFF1-49CC-A2BF-BBF6DAA7992C}
HKLM\SOFTWARE\Classes\TypeLib\{91E6F004-F9BB-4E4C-A023-94BA5E56DF8F}
HKLM\SOFTWARE\Classes\SavepathDeals.MyObjectWithSite
HKLM\SOFTWARE\Classes\SavepathDeals.MyObjectWithSite.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F66C7EC4-63CC-4452-A8C9-5A2E898F8EFF}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savepath Deals
HKLM\SOFTWARE\spd
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPD_UPDATER
HKLM\SYSTEM\CurrentControlSet\Services\spd Updater